New variant?

Do you have a question? Post it now! No Registration Necessary.  Now with pictures!

Threaded View
hxxp://xxx.bestlovelyric.com/mylove.exe

Just 2 reported 'suspicious'

Safe    7.0.17.0    2008.06.30    Suspicious File
Panda    9.0.0.4    2008.07.01    Suspicious file

I have NOD32 on my computer, it did report a possible NuWar variant.
NOD32 seems to not be reporting a crapload of files I submit to VT,
yet it always catches them on my end.

Re: New variant?


| hxxp://xxx.bestlovelyric.com/mylove.exe

| Just 2 reported 'suspicious'

| Safe 7.0.17.0 2008.06.30 Suspicious File
| Panda 9.0.0.4 2008.07.01 Suspicious file

| I have NOD32 on my computer, it did report a possible NuWar variant.
| NOD32 seems to not be reporting a crapload of files I submit to VT,
| yet it always catches them on my end.

Yes, looks like Storm Worm.

--
Dave
http://www.claymania.com/removal-trojan-adware.html
Multi-AV - http://www.pctipp.ch/downloads/dl/35905.asp



Re: New variant?

Quoted text here. Click to load it

McAfee's analysis:
W32/Nuwar@MM!F6D2E5FF
http://vil.nai.com/vil/content/v_146477.htm

-jen



Site Timeline